security-audit

Audit codebases for vulnerabilities and hardcoded secrets using grep, bandit, and dependency scanners.

Updated Aug 23, 2026

Search Tags:#code review #security #vulnerability #owasp #audit #secrets

Ready to run

npx skills add https://github.com/RedBeret/agent-skill-catalog --skill security-audit-redberet

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/RedBeret/agent-skill-catalog/tree/main/skills/security-audit
Command: npx skills add https://github.com/RedBeret/agent-skill-catalog --skill security-audit-redberet

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and mitigate security risks in your codebase, protecting against common vulnerabilities and preventing data breaches.

Core Features & Use Cases

Vulnerability Scanning: Checks for common security flaws like SQL injection, XSS, and insecure authentication.
Secret Detection: Scans for hardcoded secrets, API keys, and sensitive information.
Dependency Auditing: Identifies known vulnerabilities in project dependencies.
Use Case: Before deploying a new feature, run a security audit to ensure no secrets were accidentally committed and that the code adheres to OWASP best practices.

Quick Start

Run a security audit on the current project directory to find vulnerabilities and secrets.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my codebase for security vulnerabilities and hardcoded secrets?▼

Scanning for security vulnerabilities before deployment checks for flaws like SQL injection, XSS, and broken authentication. It ensures no API keys or sensitive information were accidentally committed and that code adheres to OWASP best practices.

Does this security audit tool check for vulnerable dependencies in npm and pip?▼

Yes, dependency auditing identifies known vulnerabilities in project dependencies using tools like pip-audit and npm audit. It scans package manifests to ensure your project adheres to OWASP best practices and prevents data breaches.

What is the best way to detect sensitive data exposure in my source code?▼

The best way to detect sensitive data exposure is by running a vulnerability scan that searches for hardcoded secrets and API keys. It addresses insecure authentication and sensitive data exposure to protect against common data breaches.

Can I use this to find OWASP top 10 vulnerabilities like XSS and SQL injection?▼

Yes, the audit specifically addresses OWASP risks including injection flaws, XSS, and broken authentication. It utilizes scanning tools like bandit and grep to detect these common security vulnerabilities across your codebase.